AAM Plugin vulnerabilities

🔔 Create alert RSS

Published CVEs affecting AAM Plugin products: 1 record(s), with severity, exploitation and fixes.

Advanced Access Manager 1

Exploited only (KEV) →

CVE-2026-42674 High · 7.5 CWE-290 Jun 1, 2026

WordPress Advanced Access Manager plugin <= 7.1.0 - Bypass Vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in AAM Plugin Advanced Access Manager allows URL Encoding. This issue affects Advanced Access Manager: from n/a through 7.1.0.